Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: c+KXmGG6iCDSgHqR17FLq801g0VbrO/+R51Drve/3MU=
Subject key identifier: 7D:C5:ED:A4:5C:07:6B:C9:EC:75:9E:3F:55:06:85:04:2F:0C:BC:73
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 0199FCC6D34F45824F8D40FEEEFBC20756C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 1523
Signing time: Sun 19 Oct 2025 14:01:52 +0000
Manifest this update: Sun 19 Oct 2025 14:01:52 +0000
Manifest next update: Mon 20 Oct 2025 14:01:52 +0000
Files and hashes: 1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: vgVmE/B7CfU3yHKTIgYpTTInkeyhIWBGpCvYi0xriyw=)
3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:d3:4f:45:82:4f:8d:40:fe:ee:fb:c2:07:56:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Oct 19 14:01:52 2025 GMT
Not After : Oct 20 14:01:52 2025 GMT
Subject: CN=7dc5eda45c076bc9ec759e3f550685042f0cbc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d7:68:d0:83:f6:ea:5d:17:8a:87:b9:fa:2b:
86:4f:39:55:ca:98:64:7a:76:92:ad:96:c1:4e:11:
9e:f3:93:6d:6f:83:01:5a:4f:0f:ec:2b:ef:77:68:
b8:09:3b:b7:e3:19:70:25:f9:b6:f1:69:5e:ac:ac:
1a:23:bb:7e:ea:84:28:b1:ba:23:02:6a:1a:38:05:
d5:a7:0f:62:07:6d:1e:99:0c:42:af:f5:d9:1d:d5:
1a:f1:29:1d:13:2c:36:a7:5d:6f:66:25:af:9c:da:
d9:ac:73:38:6e:1f:0a:d1:55:20:94:0d:59:74:75:
7f:c4:01:1b:f9:52:c1:e7:74:ef:ae:f7:60:31:84:
f9:bd:85:11:e5:63:97:9e:de:3a:b4:97:9e:28:bd:
e7:fa:4b:d3:bb:5f:a4:fd:12:25:5d:c7:bd:55:ad:
08:9a:4b:07:b1:0c:a9:87:b4:62:a4:e9:a1:bf:2e:
97:98:61:d3:26:47:f8:19:ad:ad:1d:a3:fa:67:2b:
c5:34:5b:47:fb:9a:a8:70:f4:2c:fc:58:7a:87:fb:
45:fa:46:4a:78:45:74:3a:0e:53:23:7e:e8:09:37:
92:1f:41:bc:cf:93:eb:77:63:fb:dc:fe:5b:c6:4b:
5e:dc:27:46:6d:65:b3:33:44:ca:9c:88:93:6b:28:
be:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C5:ED:A4:5C:07:6B:C9:EC:75:9E:3F:55:06:85:04:2F:0C:BC:73
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d7:6b:41:18:5a:d1:e1:22:8c:73:3d:ea:d9:98:45:47:51:
5a:03:0c:e1:8f:f8:0b:24:bb:31:08:f6:99:df:44:00:fc:1c:
dd:0d:ee:c9:af:0d:0c:57:c2:6c:a0:1f:e9:5f:72:a1:d5:eb:
09:90:97:cb:27:b3:6c:da:d2:9b:b3:ed:69:07:ba:34:40:89:
e9:c0:40:9f:c6:df:2e:cf:31:cf:9a:fa:36:96:4a:d1:b9:c1:
2c:36:c8:38:4e:e1:00:01:28:81:31:e2:cc:36:ee:2f:a7:fb:
32:c0:fa:40:fe:d3:b4:78:8f:89:1c:fa:3b:f4:3c:8a:a6:0e:
dd:f5:35:5b:d1:89:5b:00:95:ec:a3:81:7b:ae:53:18:e7:3a:
8d:25:83:59:72:c3:40:5f:51:21:ea:a3:f8:2e:6d:d7:a9:27:
24:da:81:cb:c9:7d:2f:6a:9c:66:f1:78:5c:3e:0d:ac:92:9f:
de:24:9a:51:c0:16:b3:08:98:2f:dd:d4:65:83:f3:f5:c9:b2:
00:35:88:fb:3b:1f:8e:93:8e:5e:19:0c:84:ff:05:15:a0:9e:
a7:59:cb:e5:55:70:6b:7e:8f:bf:71:ce:49:03:24:57:6f:68:
bb:2e:88:8b:ae:43:64:b3:56:d2:6f:6a:d1:07:e4:9d:8d:95:
c6:ee:a3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:53 2025 by rpki-client